internet stuff

Share this post

some links for you

neerajka.com

some links for you

i read it all so you don't have to - 5/7/2020

Neeraj K. Agrawal
May 7, 2020
1
Share this post

some links for you

neerajka.com

Facebook has to comply with local laws. This has been a problem for them in Vietnam, where for years now the local law has been don’t criticize the government on facebook. 

Reuters reported this in April and I am surprised it didn’t get more attention. Facebook was forced into better compliance with the government’s legal activist suppression orders. 

Facebook's local servers in Vietnam were taken offline early this year, slowing local traffic to a crawl until it agreed to significantly increase the censorship of "anti-state" posts for local users, two sources at the company told Reuters on Tuesday.

The restrictions, which the sources said were carried out by state-owned telecommunications companies, knocked the servers offline for around seven weeks, meaning the website became unusable at times.

There are two problems here. The state control of telecoms and facebook being a nice big and easy target to negotiate with. Of course my mind went to mesh networks and decentralized social media. One day… 


A Financial Times journalist reflected on their experience living under extreme contact tracing and passporting while in Wuhan. 

At one point in Wuhan, I received a call from a government minder. She said several journalists’ codes had turned yellow and asked if mine had too. When I replied it had, she told me I should not leave my hotel room until it turned green, despite knowing this was a glitch. “We must adhere to the conditions of the system,” she said.

And what worries me most: 

In China, many of the restrictions on movement are now being lifted and life is returning to normal. But the code system still lingers in many places. The temptations of keeping such a system of control in place, or even to centralise and strengthen it, must hold a strong attraction for the Chinese government.

I understand that it’s an emergency and people who are fretting about privacy can be seen as just getting in the way. But to say the concerns are totally unjustified is nuts. 

Meanwhile, in India 

Twitter avatar for @zackwhittaker
Zack Whittaker @zackwhittaker
New, by me: India's largest telecom Jio exposed one of its databases storing records of users' coronavirus self-check results. No password on the database. Much of the data was anonymous, but many records also contained a user's precise geolocation.
techcrunch.comSecurity lapse exposed Jio coronavirus self-test records – TechCrunchExclusive: The database contains answers to Jio’s coronavirus symptom checker and optional location data.
2:08 AM ∙ May 3, 2020
165Likes160Retweets

Probably not good: 

From one sample of data we obtained, we found thousands of users’ precise geolocation from across India. TechCrunch was able to identify people’s homes using the latitude and longitude records found in the database.

This hits on a critical part of the discussion around privacy. Yes there is risk of authorized users of the data abusing it somehow. But perhaps even greater is the risk that this centralized honeypot of valuable user information might leak or be abused by an attacker somehow. 


I am always interested in insider threats. So much of our thinking around privacy involves trusting the people who have regular access to our data. But people can be bribed, as the makers of Roblox learned.

A hacker bribed a Roblox worker to gain access to the back end customer support panel of the massively popular online video game, giving them the ability to lookup personal information on over 100 million active monthly users and grant virtual in-game currency.

With this access, the hacker could see users' email address, as well as change passwords, remove two-factor authentication from their accounts, ban users, and more, according to the hacker and screenshots of the internal system. The screenshots shared with Motherboard include the personal information of some of the most high profile users on the platform.

This is a sensitive topic for me because someone once used insider access to SIM swap me in an attempt to steal my precious coins. It is apparently quite common to bribe or blackmail support reps of the major phone companies.  As Brian Krebs has covered often: 

If you are somehow under the impression that you — the customer — are in control over the security, privacy and integrity of your mobile phone service, think again. And you’d be forgiven if you assumed the major wireless carriers or federal regulators had their hands firmly on the wheel.

No, a series of recent court cases and unfortunate developments highlight the sad reality that the wireless industry today has all but ceded control over this vital national resource to cybercriminals, scammers, corrupt employees and plain old corporate greed.

Trust can be broken people. 


American journalists working in China have been expelled recently. Here’s a thread reflecting on some of their work documenting the horrible abuses of the Chinese government. 

Twitter avatar for @paulmozur
Paul Mozur 孟建国 @paulmozur
I’m very proud. But worth saying, the situation in Xinjiang remains a terrible tragedy. Millions, like Ferkat’s mother, suffer silently under surveillance and intimidation. The bulk of our team is no longer allowed to report in China, so such abuses are now much harder to cover.
Twitter avatar for @gillianwong
Gillian Wong / 黄敬龄 @gillianwong
So proud of my colleagues, whose groundbreaking work on China’s repression of Uighur Muslims was nominated a finalist in the @PulitzerPrizes. Congrats, @austinramzy @ChuBailiang @suilee @paulmozur @amyyqin @muyixiao @ckoettl @NatalieReneau @DrewJordan_NYT https://t.co/wiBH0AY3Lx
12:49 AM ∙ May 5, 2020
1,270Likes487Retweets

And an iconic tweet for anyone who tries to use Alipay’s transaction speed and adoption as a measure of its benefit to society. 

Twitter avatar for @oleganza
Oleg Andreev @oleganza
It’s a tough choice where to put your life savings: into your own private key, or righto into pockets of a mega-corporation that’s in bed with a fascist police state.
Twitter avatar for @bascule
Tony “Abolish ICE” Arcieri 🦀 @bascule
Alipay peaks at 325,000 TPS (real world Singles Day payments). Bitcoin peaks at 0.001% AliPay’s throughput with 600X - 3600X the latency. https://t.co/dairoAyRUs
3:57 AM ∙ Apr 8, 2019
354Likes54Retweets

Twitter avatar for @gossipbabies
cancela lansbury @gossipbabies
Tik Tok that’s moralizing about something but the text is missing
Image
9:46 PM ∙ May 4, 2020
128,060Likes13,409Retweets

If you think this is good please share it or subscribe. And you can get in touch with me by replying to this email.

Share this post

some links for you

neerajka.com
Comments
TopNewCommunity

No posts

Ready for more?

© 2023 Neeraj K. Agrawal
Privacy ∙ Terms ∙ Collection notice
Start WritingGet the app
Substack is the home for great writing